Hi all,

 

A client I had quite some time ago asked me to password protect his site - a
request made after the site was already complete.  He didn't want to pay for
a proper solution, so I basically created some a static password
cookie-based system.  Now he says his former partner gained access to his
site without a password, though I think it's much more likely that his
partner just got ahold of a password.

 

I wonder if any of you would like to try to view this page - try to get past
the password challenge without knowing the legitimate passwords.  If you can
do it I'd like to know how you did it.  (Because it's a weaker-than-normal
scheme I don't doubt it's possible, but I'm resistant to his insistence that
a joe-shmoe could "hack" his way in.)

 

Anyway give it a spin if you're interested:  http://www.mcglogistics.biz
<http://www.mcglogistics.biz/>  

 

2 more things:  Firefox pukes on the site.  (standards shmandards, I used to
say.).  Also it's not any sensitive data at all - just brochureware he
decided he needed to control access to.  So I'm not at all worried about
handing over the keys to the kingdom by inviting your snooping.

 

TIA

 

paul

 



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:195428
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to